refactor: serve MCP bundles under <name>/mcp with nginx guard; rename core->mcp_server

- collect.py: copy repo MCP bundles to ROOT/<name>/mcp (instead of ROOT/mcp/<name>); add nginx location guard to deny /<name>/mcp/
- config.py: bundle roots now point to <repo>/mcp and standards/mcp for static bundles
- Rename core.py -> mcp_server.py and update imports in main.py and registry.py
- Dockerfile: per-repo MCP COPYs under /app/<name>/mcp, drop blog copy; add ports 8008/8009 in .drone.yml
- Restore standards/mcp/libraries.json from git for registry server

py-jwt/mcp/modules/jwtlib.models.security.json

@@ -0,0 +1,32 @@
+{
+  "module": "jwtlib.models.security",
+  "content": {
+    "path": "jwtlib.models.security",
+    "docstring": "# Summary\n\nJWT token payload models.\n\nThis module defines typed representations of decoded `JWT` payloads used\ninternally for token validation and user resolution.",
+    "objects": {
+      "TokenPayload": {
+        "name": "TokenPayload",
+        "kind": "class",
+        "path": "jwtlib.models.security.TokenPayload",
+        "signature": null,
+        "docstring": "Decoded `JWT` payload.\n\nAttributes:\n    sub (str):\n        Subject claim identifying the user (typically a username or user ID).\n    exp (int):\n        Expiration time as a Unix timestamp (seconds since epoch).\n\nNotes:\n    **Responsibilities:**\n\n        - Represents the validated claims extracted from a `JWT` after\n          signature verification. This model is used internally to enforce\n          required claims and provide a typed interface to token data.\n\n    **Guarantees:**\n\n        - This model assumes the `JWT` signature has already been verified.\n          No authorization decisions should be made solely on this model.\n          Additional claims may exist but are intentionally ignored.",
+        "members": {
+          "sub": {
+            "name": "sub",
+            "kind": "attribute",
+            "path": "jwtlib.models.security.TokenPayload.sub",
+            "signature": null,
+            "docstring": null
+          },
+          "exp": {
+            "name": "exp",
+            "kind": "attribute",
+            "path": "jwtlib.models.security.TokenPayload.exp",
+            "signature": null,
+            "docstring": null
+          }
+        }
+      }
+    }
+  }
+}